Amendments to the Claims 



Kindly amend claims 7, 10 & 12, and cancel claims 1-6, 8, 9, 11 & 14-28 (without 
prejudice) as set forth below. All pending claims are reproduced below, with changes in the 
amended claims shown by underlining (for added matter) and strikethrough/double brackets (for 
deleted matter). 

1-6. (Canceled). 

7. (Currently Amended) A method of recovering integrated system functionality 
following a trigger event, said method comprising: 

automatically establishing a reduced level of functionality within the 
integrated system; [[and]] 

allowing for full functional recovery of the integrated system by 
employing a selective recovery procedure; 

wherein the recovery procedure includes loading initialization code into 
the integrated system at a secure physical location; 

wherein the loading of initialization code further comprises loading 
unencrypted initialization code into the integrated system, including restoration 
initialization code, and wherein the method further comprises: 

executing the restoration initialization code to obtain a master key 
and a substitute initialization address; 

encrypting the restoration initialization code with the master key 
and storing the encrypted initialization code at the substitute initialization 



reinitializing the integrated system using the stored encrypted 
initialization code at the substitute initialization address; and 

wherein the initialization code further comprises a manufacturer's public 
key, and wherein the method further comprises: 

generating at the integrated system a public/private key pair; 
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securely storing the integrated system's private key; and 



encrypting the integrated system's public key using the 



manufacturers public key . 



8-9. (Canceled). 

10. (Currently Amended) The method of claim [[9]] 7, further comprising storing the 
master key and the substitute initialization address in persistent storage associated with a data 
access control function of the integrated system. 

11. (Canceled). 

12. (Currently Amended) The method of claim 9, A method of recovering integrated 
system functionality following a trigger event, said method comprising: 

automatically establishing a reduced level of functionality within the 
integrated system; 

allowing for full functional recovery of the integrated system by 
employing a selective recovery procedure; 

wherein the recovery procedure includes loading initialization code into 
the integrated system at a secure physical location; 

wherein the loading of initialization code further comprises loading 
unencrypted initialization code into the integrated system, including restoration 
initialization code, and wherein the method further comprises: 

executing the restoration initialization code to obtain a master key 
and a substitute initialization address; 

encrypting the restoration initialization code with the master key 
and storing the encrypted initialization code at the substitute initialization 
address; 

reinitializing the integrated system using the stored encrypted 
initialization code at the substitute initialization address; and 
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further comprising establishing a secure network connection between the 
integrated system and manufacturer, the establishing employing the generated 
public/private key pair, and downloading across the secure network connection 
required code and data to reestablish full functionality of the integrated system. 

13. (Original) The method of claim 7, wherein the automatically establishing the 
reduced level of functionality within the integrated system includes limiting access to secure 
code and data within the integrated system. 

14-28. (Canceled). 
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